// we don't set anything on read and instead do it all in create
ciphertext, ok := res["ciphertext"]
if !ok {
  return fmt.Errorf("Create response didn't contain critical fields. Create may not have succeeded.")
}
if err := d.Set("ciphertext", ciphertext.(string)); err != nil {
	return fmt.Errorf("Error setting ciphertext: %s", err)
}

id, err = replaceVars(d, config, "{{crypto_key}}/{{ciphertext}}")
if err != nil {
	return fmt.Errorf("Error constructing id: %s", err)
}
d.SetId(id)
